Recent Security News
-
TetrisPhantom: Cyber Espionage via Secure USBs Targets APAC Governments
October 18, 2023 at 05:33AM The Asia-Pacific region is experiencing a cyber espionage campaign called TetrisPhantom, in which government entities are the primary targets. The attackers exploit secure USB drives with hardware encryption to gather sensitive data. The campaign is sophisticated and likely the work of a nation-state group. In addition, a new APT actor…
-
Microsoft disables bad spam rule flagging all sent emails as junk
October 18, 2023 at 04:13AM Microsoft resolved an issue where admins were receiving an excessive number of blind carbon copies (BCC) of outbound emails flagged as spam. The problem caused legitimate emails sent to external addresses to be marked as spam. Microsoft disabled the rule causing the problem and confirmed that it has been resolved.…
-
New Admin Takeover Vulnerability Exposed in Synology’s DiskStation Manager
October 18, 2023 at 03:33AM A medium-severity flaw has been discovered in Synology’s DiskStation Manager (DSM) that could allow an attacker to remotely hijack an administrator’s account by deciphering their password. The flaw stems from the use of a weak random number generator. Synology has already addressed the issue in updates released in June 2023.…
-
FBI warns of extortion groups targeting plastic surgery offices
October 18, 2023 at 02:55AM The FBI warns of cybercriminals targeting plastic surgery offices in the US using spoofed emails and phone numbers. After accessing networks, the attackers steal sensitive data to extort surgeons and patients. This data is enhanced with open-source information for more convincing extortion attempts. The cybercriminals contact targets through various means…
-
Top 4 Emerging Trends in Software Engineering
October 18, 2023 at 01:07AM The top four emerging trends in software engineering, as highlighted in Gartner’s Application Innovation and Business Solutions Summit, are platform engineering, low-code technologies, super apps, and generative AI coding assistance. Platform engineering aims to improve developer productivity and efficiency by providing self-service capabilities through an internal developer platform. Low-code technologies…